Secured Servlet and EJB with JAX-RS